Found this as well, which seems to be included in the ACM, for $10/mo. “Total TLS One-click and Cloudflare will issue individual certificates for all your proxied domains.” Stupid question… are subdomains and proxied domains synonymous. If not, how are they different and what do I need to do in order to secure subdomains?
ACM will cover any Proxied DNS record in that domain.
Those certificates will show up in the same list as all the other ones Cloudflare has on hand for your domain: Websites → EXAMPLE.COM → SSL/TLS → Edge Certificates
Hi sdayman, Thanks for the speedy reply. Sorry, still a bit confused. We do or do not need to purchase ACM in order for our subdomain names, e.g. “webmail.example.com” to be protected under an SSL cert?
No, you don’t need to purchase ACM. This certificate will cover your zone apex (example.com ) and all first-level subdomains (subdomain.example.com ), and is provisioned even if your records are DNS only. However, the certificate will only be presented if your domain or subdomains are proxied.